• The role of an information systems security (ISS) policy framework in overcoming business challenges
• How security policies help mitigate risks and support business processes in various domains in the information technology (IT) infrastructure
• Components and basic requirements for creating a security policy framework.
• Different methods, roles, responsibilities, and accountabilities of personnel, along with the governance and compliance of security policy framework
• ISS policies associated with the user domain
• ISS policies associated with the IT infrastructure
• ISS policies associated with risk management
• ISS policies associated with incident response teams (IRT)
• Implementing and enforcing ISS policies
• Defining, tracking, monitoring, reporting, automating, and configuration of compliance systems and emerging technologies

1. The Need for IT Security Policy Frameworks

• Information Systems Security Policy Management
• Business Drivers for Information Security Policies
• U.S. Compliance Laws and Information Security Policy Requirements
• Business Challenges Within the Seven Domains of IT Responsibility
• Information Security Policy Implementation Issues

2. Types of Policies and Appropriate Frameworks

• IT Security Policy Frameworks
• How to Design, Organize, Implement, and Maintain IT Security Policies
• IT Security Policy Framework Approaches
• User Domain Policies
• IT Infrastructure Security Policies
• Data Classification and Handling Policies and Risk Management Policies
• Incident Response Team (IRT) Policies

3. Implementing and Maintaining an IT Security Policy Framework

• IT Security Policy Implementations
• IT Security Policy Enforcement
• IT Policy Compliance Systems and Emerging Technologies

General knowledge of networking and management information systems